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Abstract — The network communication scenario where one or 
more receivers request all the information transmitted by differ- 
ent sources is considered. We introduce distributed polynomial- 
time network codes in the presence of malicious nodes. Our codes 
can achieve any point inside the rate region of multiple-source 
multicast transmission scenarios both in the cases of coherent and 
non-coherent network coding. For both cases the encoding and 
decoding algorithm runs in poly(\£\)exp(s) time, where poly(\£\) 
is a polynomial function of the number of edges \£\ in the network 
and exp(s) is an exponential function of the number of sources s. 
Our codes are fully distributed and different sources require no 
knowledge of the data transmitted by their peers. Our codes are 
"end-to-end", that is, all nodes apart from the sources and the 
receivers are oblivious to the adversaries present in the network 
and simply implement random linear network coding. 

Index Terms — polynomial-time codes, error-correction, double 
extended field, Gabidulin codes 

I. Introduction 

Information dissemination can be optimized with the use of 
network coding since it maximizes the network throughput in 
multicast transmission scenarios (TJ. At the same time network 
coding is highly vulnerable to malicious attacks from rogue 
users. The presence of even a small number of adversarial 
nodes can contaminate the majority of packets in a network, 
preventing receivers from decoding. 

The work of Cai-Yeung |2| first studied the network error- 
correction problem in the single source scenario, and their 
scheme requires high (exponential in the network size) design 
complexity. Further works by [3| and |4| provided network 
error-correcting codes with design and implementation com- 
plexity that is low (i.e., polynomial in size of the network pa- 
rameters). The design of such robust network codes with "ac- 
tive nodes" (i.e. internal nodes using cryptographic schemes 
to detect packets modified by computationally bounded adver- 
saries) has also been considered in the cryptographic setting 
(see for instance Q, H). 

We consider the design of multisource network error- 
correcting codes that are resilient against worst-case network 
errors, i.e., against errors injected by computationally un- 
bounded adversaries. Naive implementations of single source 
network error-correcting codes fail since such codes require 
the source to judiciously insert redundancy into the transmitted 
codeword; however, in the distributed source case this cannot 
be done. The work in [7| gave the capacity region for the 

* In other words, MANIAC codes. 



multisource network error correction problem, but the achiev- 
ability proof used codes with high decoding complexity. 

The current paper gives the first construction of efficient 
decodable error-correction codes. For both coherent (when the 
network transform is known a priori to the receiver(s)) and 
non-coherent (when no such information is known a priori to 
the receiver(s)) cases our codes achieve the optimal rate-region 
demonstrated in |7| and have implementation complexity that 
is polynomial in the size of the network. Furthermore our 
codes are fully distributed in the sense that different sources 
require no knowledge of the data transmitted by their peers 
and end-to-end, i.e., all nodes are oblivious to the adversaries 
present in the network and simply implement random linear 
network coding [ 8 1 . A remaining bottleneck is that the compu- 
tational complexity of our codes increases exponentially with 
the number of sources. Thus the design of efficient schemes 
for a large number of sources is still open. 

The remainder of this paper is organized as follows: In 
Section [II] we formulate the problem and introduce the math- 
ematical preliminaries. In Section III we provide a code 
construction for the coherent case, i.e., the receiver(s) knows 
the linear transform from each source induced by random 
linear network code. In Section [TV] we construct codes for the 
non-coherent case, where the receiver(s) has no information 
on the network transforms. 

II. Preliminaries 

A. Model 

We consider a delay-free network Q = (V,£) where V is 
the set of nodes and £ is the set of edges. The capacity of each 
edge is normalized to be one symbol of F p per unit time. Edges 
with non-unit capacity are modeled as parallel edges. 

For notational convenience we restrict ourselves to the 
analysis of the situation where there are only two sources 
Si , S2 € V transmitting information to one receiver R 6 V, 
since the extension of our results to more sources and receivers 
is straightforward. The minimum cut capacity from source Si 
to 1Z is denoted by d for i g [1,2], and the minimum cut 
capacity from both sources to the receiver is equal to C. 

Within the network there is a hidden adversary trying to 
interfere with the transmission of information by observing 
all the transmissions in the network and injecting its own 
packets in any z link^J that may be chosen as a function 

'Note that since each transmitted symbol in the network is from a finite 
field, modifying symbol x to symbol y is equivalent to injecting/adding 
symbol y — x into x. 



of his complete knowledge of the network, the message, and 
the communication scheme. 

The sources on the other hand know nothing about each 
other's transmitted information and the links compromised 
by the adversary. Their goal is to add redundancy into their 
transmitted packets so that they can achieve any rate-tuple 
(Ri,R 2 ) such that Ri < C x - 2z, R 2 < C 2 - 2z, and 
Ri + R 2 < C — 2z (this is the rate region of the multi-source 
multicast problem proved in [7|). An example network and its 
rate region is shown in Figure [T] 
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Fig. 1. An example network with two sources. The Network in Figure [Ua)| 
has Ci = C2 = 4, C = 5 and the adversary can inject z = 1 error packet. 
The achievable rate region is shown in the dark region of Figure |l(b)| 



To simplify the discussion we show the code construction 
for rate-tuple (Ri, R 2 ) satisfying Ri < C\—2z, R 2 < C 2 —2z, 
Ri + R 2 + 2z = C and exactly C edges reach the receiver 1Z 
(if more do, redundant information can be discarded). 

B. Random linear network coding 

In this paper, we consider the following well-known dis- 
tributed random linear coding scheme ifHl . 

Sources: The source Si arranges the data into a Cj x £ 
message matrix Mi over ¥ p (here the packet-length £ is a 
network design parameter). For i £ [1,2] source Si then takes 
independent and uniformly random linear combinations over 
F p of the rows of Mi to generate respectively the packets 
transmitted on each outgoing edge. 

Network nodes: Each internal node similarly takes uni- 
formly random linear combinations of the packets on incoming 
edges to generate packets transmitted on outgoing edges. 

Receiver: The receiver 1Z constructs the C x £ matrix Y over 
F p by treating the received packets as consecutive length-^ row 
vectors of Y (recall that exactly C edges reach 1Z). In the case 
that no error happen in the network, the network's internal 
linear operations induce linear transforms between Mi and Y 
as 

Y =T 1 M 1 +T 2 M 2 , (1) 
where Tj is the overall transform matrix from Si to 1Z. 

C. Finite field extension 

In the analysis below denote by Fj5™ xn the set of all m x 
n matrices with elements from ¥„. The identity matrix with 
dimension to x m is denoted by I m , and the zero matrix of 
any dimensions is denoted by O .The dimension of the zero 



matrix will be clear from the context stated. For the clarity of 
notation vectors are in bold-face (e.g. A). 

Before we continue to the analysis of the encoding and 
decoding process it is useful to introduce some concepts from 
the theory of finite field. Every finite field F p , where p is a 
prime or a power of a prime, can be algebraically extendec|^][9] 
to a larger finite field F 9 , where q = p n for any positive integer 



Note that F„ includes F„ 



A £ ¥. 



is also a matrix in F™ x 



as a subfield thus any matrix 
. Hence throughout the 



paper matrix multiplication over different fields (one over the 
base field and the other from the extended field) is allowed 
and computed over the extended field. 

There is a bijective mapping between F™ x ™ and F™ 
defined as follows: 

• For each A £ ¥™ xn , the folded version of A is a vector 
A-f in F™ given by Aa T where a = {<2i, . . . , a„} is a 
basis of the extension field ¥ q with respect to F p . Here we 
treat the i th row of A as a single element in F„ to obtain 



the z th element of A*. For instance let A 



be 



a matrix in F| x2 



F4 gives 



Af = 



(1,0) 

(1,1). 
1 mod (x 2 + a 



1 
1 1 

Then the operation of folding it into 



£ F4 2 (where 2 = x and 



i) m 



For each B £ F™, the unfolded version of B is a matrix 
B u in F™ xn . Here we treat the i th element of B as a 
to obtain the i tb row of B u . For instance 

be a vector in ¥4. Then the operation of 



in Fp mxn . 
row in Fp lxn 



let B 



unfolding it into Ff x2 gives B w = 



We can also extend these operations to include more general 
scenarios. Specifically any matrix A £ F™ x£n can be writ- 
ten as a concatenation of matrices A = [A% . . . At], where 
Ai £ Fp nxn . The folding operation is defined as follows: 
A* — [A{...Ap]. Similarly the unfolding operation u can 
be applied to a number of submatrices of a large matrix, e.g., 
[Af . . . A{f = [{A{Y . . . [A{Y] = [A\... A e }. 

In the paper double algebraic extensions are considered. 
More precisely let ¥q be an algebraic extension from Fo, 
where Q = q N = p nN for any positive integer N. Table [N 
summarize the notation of the fields considered. 

TABLE I 
Summary of filed notations 



Field F r; 



Size 



p q = p 



Q = q 



jsr 



Note: Of the three fields ¥ p , ¥ q and ¥ Q defined above, two 
or sometimes all three appear simultaneously in the same 
equation. To avoid confusion, unless otherwise specified, the 
superscript / for folding is from F p to ¥ q , and the superscript 
u for unfolding is from ¥ q (or Fq) to F p . 

2 Let ¥ p [x] be the set of all polynomials over ¥ p and f(x) £ F p [x] be an 
irreducible polynomial of degree n. Then ¥ p [x]/f(x) defines an algebraic 
extension field W p n by a homomorphism mapping \9 \. 



D. Row-space distance 

For any two matrices B x G F™ lXn and B 2 G F™ 2X ™ let 
B\ be the subspace spanned by the rows of Bi and B 2 be the 
subspace spanned by the rows of B 2 . The row-space distance 
of B\ and B 2 is defined as ds[B\, B 2 ) = dim(span(Bi U 
B 2 )) — dim{span(B\ n B 2 )). Row-space distance is a metric 
and satisfies the triangle inequality iflOl . 

If mi = m 2 = to, the following proposition is direct 
consequence of Corollary 3 in 0): 

Proposition 1. d s {B 1 ,B 2 ) < 2 rank(B 1 - B 2 ). 

E. Gabidulin codes 

Gabidulin in ifTTl introduced a class of error correcting 



codes over F™ x ™. 



Let X € be the information vector, 
G ¥\ nxR be the generator matrix, (GX) 11 G ¥ r p nxn be 

?mxri ^ e tne error matrix, and 

Z G F™ x " 



be the generator matrix, (GX) 11 6 F™ 
the transmitted matrix, Z e 

(GX) 11 + Z G F™ xn be the received matrix. Then decoding 
is possible if and only if rank(Z) < where d — m—R+1 
is the minimum distance of the code. 

The work of [4] utilizes the results of 1TD to obtain network 
error-correcting codes with the following properties: 

Theorem 1 (Theorem 11 in g)). Let Z can be expressed as 
Z = r i L;Ei, such that: 

. For each i G [l,r], L t G F p mxl and E f € F p lx "; 

• For eac/i x G [1, zx], Lj ;s fc«own a priori by the receiver; 

• For each i G [/x + 1, /x + 8], Ej is known a priori by the 
receiver; 

. 2T- / Lt-6<d-L 
Ms/«g Gabidulin codes the receiver can decode X vWf/i at most 
0(mn) operations over ¥ q . 

Thus when /x = 8 = 0, Theorem [T] reduces to the basic case 
where the receiver has no priori knowledge about Z. 

III. Coherent network error-correcting codes 

Coherent here means the receiver 1Z knows the linear 
transforms from both Si and S 2 , i.e., 7Z knows T\ and T 2 
defined in equation For instance, it is possible T\ and T 2 to 
be inferred by network communications before the adversary 
enters the network and corrupts information. Alternatively, if 
centralized designed network coding is used 1121 . Xi and T 2 
is assumed to be known by the receiver. 

While the non-coherent codes we propose are more general 
than the coherent codes, the description of the latter is simpler, 
and hence we first describe them. Under the coherent assump- 
tion the goal of the section is to construct a code attaining any 
rate-tuple (R 1: R 2 ) in the rate region for our communication 
scenario (see section [Tl-A| for details). 

A. Encoding 

Each source Si, i £ [1,2], has information to deliver to 
destination 7Z and organizes this information into batches of 
Ri packets. Each packet is a concatenation of I — knN 
symbols from the finite field F p , where n = R\ + 2z and 



N = R 2 + 2z and k is a code design parameter. For simplicity 
we will analyze the transmission of a single batch of packets. 
The way sources encode their information packets is 



through the use of Gabidulin codes (see Section II-E for 



details). More precisely the information of S± is a matrix 
X\ 6 ¥ RlXkN , where ¥ q is an algebraic extension of F p and 
q = p n (see Section [Tl-C| for details). Before transmission Xi 
is multiplied with a generator matrix, Gi € ¥ q lxRl , creating 
*( feA wn ose unfolded version Mi — (G\Xi) u is 
xl that is transmitted through the network using 



where 



GxX x G F, 
a matrix in F p 

the random linear network coding defined in Section |II-B 

The information of S 2 is a matrix X 2 G Fq 
Fq is an algebraic extension of ¥ q and Q = q N = p nN . 
Before transmission X 2 is multiplied with a generator matrix, 
G 2 G ¥q XR \ creating G 2 X 2 G F^ xfc whose unfolded 
version M 2 = (G 2 X 2 ) U over F p is a matrix in ¥p Xi that 
is transmitted through the network using the random linear 



network coding defined in Section II-B 

Both Gi and G 2 are chosen as generator matrices for 
Gabidulin codes and have the capability of correcting errors 
of rank at most z over F p and ¥ q respectively. 

B. Decoding 

The packets reaching receiver 1Z can be expressed as 



Y = T 1 M 1 +T 2 M 2 + E, 



(2) 



where Y G F,p x ^ is the matrix formed by the packets received 



by K, Ti G F 



Cxn 



T 2 G 



F p CxJV 



are the linear transform 

Cxi ;„ 



matrices from Si and S 2 to the receiver 7Z, and EeF. 
the error matrix induced at the receiver. Note that mnk(E)< z 
since the adversary can inject only z error packets 0. 
Folding equation (|2ji into ¥ q results in: 

" Xi ' 



Yf = [T x Gx T 2 



Mi 



El, 



(3) 



where has rank at most equal to z according to Lemma [I] 

Lemma 1. Folding a matrix does not increase its rank. 

Proof. Let matrix H G F p mxfc " has rank(#) = r. Thus H = 
WZ, where Z G F p rxfcn is of full row rank and W G F p rraxr 
is of full column rank. After the folding operation H becomes 
Hf = WZ f and therefore rank(i7- f ) < r. □ 
LetL>= [TxGi T 2 }. Since R\ + N = R t + R 2 + 2z = C 



(see Section [Tl-A| for details), D is a G x G square matrix. 

is invertible with probability 



Lemma 2 

at least 1 — \£\/p. 



Matrix D G F^ xC 



Proof: Let X be the set of random variables over F p comprised 
of the local coding coefficients used in the random linear 
network code. Thus the determinant of D is a polynomial 
over ¥ q of degree at most \£\ (see Theorem 1 in |8] 
for details). Since the variables X in f(X) are evaluated 
over F p , i(X) is equivalent to a vector of polynomials 
(MX), f 2 (X), /„(*)), where fc(X) G ¥ p [X] is a poly- 
nomial over ¥ p with variables in X. Note that f(X) also 



has degree no more than \£\ for each i £ [l,n]. Thus once 
we prove that there exists an evaluation of X such that f is 
a nonzero vector over F p , we can show D is invertible with 
probability at least 1 — \£\/p by Schwartz-Zippel lemma 1 13 1. 

Since Ri+N — C (see Section [Ti7A| for details) and R x < 
C\ and N < C%, there exist K\ + N edge-disjoint-paths: 
V\,V\, . -.,V Rl from si to r and V\, V%, . . . , V% from s 2 
to r. The variables in X are evaluated in the following manner: 



1). Let O be the zero matrix in F 



71XN 



We choose the 



variables in X so that the R\ independent rows of [G± , O] £ 
pnxc correS p 0nc i to routing information from si to R via 

2). Let {ur 1+x , u^ 1+ 2, . . . , up} be N distinct rows of the 
identity matrix in ¥ q c such that for each i £ [1, JV], UR 1+ i 
has the element 1 located at position R\ + i. Then these N 
vectors correspond to routing information from S2 to r via 

I 1 j ' 2 ! • • ■ i 1 N- 

Under such evaluations of the variables in X, matrix D 
T| , where G\ £ ¥ RlxRl consists of the R 1 



equals 

L ^ *■ N . 

independent rows of G\. Hence f is non-zero. Using the 
Schwartz-Zippel Lemma f ^ and thus D is invertible with 
probability at least 1 — \£\/p over the choices of X. □ 

Hence, by multiplying Equation ^ by D _1 the receiver 



gets D^Yf 



Ml 



D~ 1 E$ . The last N = R 2 + 2z rows 



of D~ 1 Y f are (D~ 1 Y f ) d 



M. 



f 



(D- 1 E f ) d , where the 



subscript d stands for the last N rows of each matrix. 
Note: To show why 52 uses a generator matrix G2 over a 



double-extended field ¥n = F„ 



= F„ 



consider what 



happens if instead it uses Fq = ¥ q . In this case the matrix 
Mjf + (D~ 1 Ef)d is indeed of the form required for successful 
decoding of Gabidulin codes as long as (D~ 1 Ef) d i has rank 
less than z over ¥ p . But this is not generally the case since 
D^ 1 belongs to ¥ q but not F p . Therefore although E' and 
consequently D~ X E$ have rank less than z over ¥ q , the rank 
of (D- 1 Ef)% might increase over F„. 

If source <S>2 uses a generator matrix G2 defined over Fq = 
F g jv that is able to correct rank z errors over F q , we can prove 
the main result in this section as follows. 

Theorem 2. A coherent receiver 1Z can efficiently decode both 
Xi and X2 correctly with probability at least 1 — 2\£\/p. 

Proof. First, according to Lemma [2] matrix D is invertible with 
probability at least 1 — \£ \/p. Since G2 is able to correct rank 
z errors over ¥ g , using {D^Y^d = M{ + (D~ 1 E :f ) d , TZ 
can execute the Gabidulin decoding algorithm and get X2. 

Second, once X2 is known T2M2 is subtracted from Y to 
result in T\Mi +E. Since T\ is left invertible with probability 
at least l-\£\/p (by QD), Tl can multiply T x Mx+E with the 
left inverse of T x giving Mi +Tf 1 E. Since rank(T 1 _1 £') < z 
over base field F p , the execution of the Gabidulin decoding 
algorithm results in X\. In the end the overall probability of 
correct decoding is at least 1 — 2\£ \/p. □ 



C. Complexity discussion 

Since the computational complexity of the coherent network 
error-correcting codes here is that same as those of the non- 
coherent codes shown later, we delay the discussion until 
Section HV-C1 

IV. Non-Coherent Error correction 

In the non-coherent case it is assumed that receiver TZ 
does not know the network transform matrices T\ and T2 
of the two sources prior to communication in the presence 
of the adversary. Assuming a non-coherent receiver the goal 
of this section is to construct codes attaining any rate-tuple 
(R\,R 2 ) in the rate region for our communication scenario 
(see section [Tl-A| for details). 

A. Encoding 

In the scenario where the receiver TZ does not know T\ and 
T 2 a priori the two sources append headers on their transmitted 
packets to convey information about T\ and T2 to the receiver. 
Thus source S\ constructs message matrix [7 n O Mi] with 
the zero matrix O having dimensions n x N, and source <5>2 
constructs a message matrix [O In M2] with the zero matrix 
O having dimension N x n. The identity and zero matrices 
have elements from F p and the Mi, M2 matrices in ¥^ xe 
have the same definitions as in Section [TTTI-A. 

B. Decoding 

The two message matrices are transmitted to the receiver TZ 
through the network with the use of random linear network 
code and therefore the receiver gets: 



Y=[Y 1 Y 2 Y 3 ] = [T 1 T 2 A]+E, 



(4) 



where A = T X M X + T 2 M 2 £ 
has rank no more than z 
[Ei E 2 E 3 ], where Ei £ 



¥f xe and E £ F p Cx (™ +Ar + r ' 
over field F„. Let E 

¥ Cxn 



V 



and E 2 £ F p OXJV and 



E3 £ ¥p . As in the decoding scheme in Section 
receiver TZ first decodes X2 and then X x . 
Stage 1: Decoding X 2 : 



III 



the 



LetY a =[YiGi Y 2 Y 3 f ] be a matrix in F jWi+™ r ). 



To be precise: 
Y, 



[T1G1 T 2 At] + [E1G1 E 2 E{] . (5) 



Receiver TZ uses invertible row operations over ¥ q to transform 
Y a into a row-reduced echelon matrix \Trre Mrre] that 
has the same row space as Y a , where True has C = Ri + N 
columns and Mrre has kN columns. Then the following 
propositions are from the results^] proved in (4): 

1) The matrix \Trre Mrre] takes the 
Ic+LUZ r~ 



Proposition 2. 

form [Trre 



M. 



RR.E 



o 



E 



where 



Ufj, £ ¥ q ^ comprises of fi distinct columns of the CxC 
identity matrix such that U^r = and UT L = —1^. In 

3 1) is from Proposition 7, 2) from Theorem 9, and 3) from Proposition 10 
in 0. 



particular, L in F^ XAI is the "error-location matrix", 



in ¥^ xkN is the 



'message matrix ", and E in F 



SxkN 



the "known error value" (and its rank is denoted 5). 



2) Let X 



M. 



and e = r — X and r 



rank 



Then 2t 



ds([TRRE M RRE ] , [I c 
distance between \T RR e 



- fj, — 5 is no more than 

X] ), i.e., the row-space 
M RRE \ and [I G X). 



3) There exist t column vectors Li, L2, . . . , L r £ 



and t row vectors E l5 E 2 , . 

LjE,; 



F c 



, ,E T £ FJ"™ such that 



L M are the 



e = ^ ig j 1)T , LjEj. In particular, Li,L 2 
columns of L, and E^+i, E M+ 2, . . . , E^+,5 are the rows 
ofE. 

Recall that the subscripte d stands for the last TV rows of any 
matrix/vector. Then we show the following for our scheme. 

Lemma 3. 1) Matrix ea — — M% can be expressed as 
e d = Si£i,2,...,r( L i)<« E i' where (Li)d, (L 2 )<j, . . . , (L M ) d are 



the columns of Ld and E^+i, E M+ 2, ■ • ■ 
ofE. 

2) With probability at least 1 — |£|/p, 



,E 



are the rows 



2t- 



5<2z 



Proof. 1) It is a direct corollary from Proposition [2] 3. 

2) Using Proposition |2|2| it suffices to prove with probability 
at least l-\E\/p, d s (\TR R E M RRE ],[l c X\)<2z. 

As shown in the proof of Lemma 111 the columns of E 3 
are in the column space of E3 (and then of E) over ¥ q . Thus 
[Ei E 2 e£] and therefore [E x Gi E 2 e£] has rank at 
most equal to z over F g . Using Proposition [T] and Equation d5j, 
d S {Y a , [Tid T 2 A*]) is no more than 2z. 

Since d s {[T RRE M RRE ] ,Y a ) = 0, we have 
ds([T RRE M RRE ] , [T X G X T 2 Af])<2z. 

Using Lemma [2] matrix D is invertible with proba- 
bility at least 1 — \£\/p, so \jc X] has zero row- 
space distance from [D DX] = [T x G?i T 2 A*]. Thus 
d S {[T RRE M RRE ],[I C X\)<2z. □ 

In the end combining Lemma [3] and Theorem [T] the receiver 
1Z can take (Ld, E, r) as the input for the Gabidulin decoding 
algorithm and decode X 2 correctly. 

Stage 2: Decoding X\\ 

From equation Q the receiver 7Z gets Y = 
[Ti +E 1 T 2 +E 2 A + E 3 ] . The receiver K 
computes (T 2 + E 2 )M 2 and then it subtracts matrix 
[O (T 2 + E 2 ) (T 2 + E 2 )M 2 ] from Y. The resulting 
matrix has N zero columns in the middle (column n + 1 to 
column n + N). Disregarding these we get: 

Y' = [Ti IWi] + [E x E 3 - E 2 M 2 ] . 

The new error matrix E' = \Ei E 3 — E 2 M 2 ] has rank 
at most z over F p since the columns of E' are simply 
linear combinations of columns of E whose rank is at most 
z. Therefore the problem degenerates into a single source 
problem and receiver 7Z can decode X\ with probability at 



least 1 — \£ \/p by following the approach in §4§. 

Summarizing the above decoding scheme for X\ and X 2 , 
we have the main result in the section. 

Theorem 3. A non-coherent receiver 1Z can efficiently decode 
both Xi and X 2 correctly with probability at least 1 — 2\£ \/p. 

C. Complexity discussion 

The paper consider the technique of double field-extension 
to design double-access network codes robust against network 
errors. The technique has not been considered before in the 
literature, and makes achieving the rate-region proved in Q 
computationally tractable. 

For both coherent and non-coherent cases the computational 
complexity of Gabidulin encoding and decoding of two source 
messages is dominated by the decoding of X 2 , which requires 
0(ClnN\og(nN)) operations over F p (see 0). 

To generalize our technique to more sources, consider a 
network with s sources Si,S 2 , . . . ,S S . Let Ri be the rate of 
Si and rii = Ri + 2z for each i £ [1, s}. A straightforward gen- 
eralization uses the multiple field-extension technique so that 
Si uses the generator matrix over finite field of size p«i«a 
In the end the packet length must be at least n g = ri\n 2 . . . n s , 
resulting in a decoding complexity (D(Cn 2 g log(n s )) increasing 
exponentially in the number of sources s. Thus the multiple 
field-extension technique works in polynomial time only for a 
fixed number of sources. 
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